Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79d9b2b8-adf9-31af-9cdd-dfe2d5d6a866.roa
File: 79d9b2b8-adf9-31af-9cdd-dfe2d5d6a866.roa (raw, json)
Hash identifier: Pd1cQsLeEHRbUWjmvcAhptG2FNZa6ZCyLtYW3od50i8=
Subject key identifier: 38:35:9B:CB:E3:AD:9C:DB:68:D3:BC:30:89:7D:D2:02:F7:98:06:0C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830C4D4C4C94A86C6275D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79d9b2b8-adf9-31af-9cdd-dfe2d5d6a866.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396544
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c4:d4:c4:c9:4a:86:c6:27:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=999b4ac2-a7a2-41ac-b980-8151cf775828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:07:80:d1:08:40:c7:8f:24:6f:fc:b3:d3:
b4:f5:73:aa:46:ac:6e:95:76:5d:b0:55:ea:46:34:
43:48:b7:ff:28:98:e1:d5:7c:4d:d1:70:e7:fd:66:
a9:7d:93:df:f6:77:13:38:c3:61:e7:eb:f5:d3:12:
68:6f:07:93:9f:22:50:0f:d5:f7:7b:e9:c5:4f:60:
40:68:1c:e4:82:f8:f0:c7:b1:54:20:68:a3:da:49:
0d:93:b0:80:ee:50:6d:17:63:cb:16:dc:7f:b4:c7:
da:50:ec:1f:5b:db:59:6c:2b:10:e1:6f:6a:80:a7:
74:cf:7c:5c:5a:46:bf:d4:e4:7c:51:0a:1a:bc:62:
89:f5:1e:26:8b:f9:47:2d:39:d8:9b:6f:56:75:59:
51:fe:77:b3:d5:b7:b8:3b:81:df:e6:bd:af:0a:5f:
b0:46:dd:4e:13:c2:3b:ce:f3:38:77:0c:97:31:69:
9d:ff:82:9e:13:55:33:5d:db:b2:b9:d6:2d:48:43:
83:cb:6d:7f:47:24:3a:e4:c3:b6:e0:a2:39:1e:01:
f6:fb:d8:ce:4f:8b:5a:fc:f8:f0:af:ab:83:52:e0:
b1:56:b6:fa:aa:fc:9e:95:5b:48:a3:9c:1a:50:60:
6d:93:5d:4f:a1:74:a6:12:ae:15:c7:8e:ed:f7:1e:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:35:9B:CB:E3:AD:9C:DB:68:D3:BC:30:89:7D:D2:02:F7:98:06:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79d9b2b8-adf9-31af-9cdd-dfe2d5d6a866.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:74:2f:e8:e3:b2:88:b8:a4:12:b4:af:31:ce:47:59:e6:b4:
99:a8:87:1f:87:93:50:23:72:a2:dd:18:71:25:34:e4:06:71:
b0:e4:8a:5b:cd:cb:40:9f:c3:c0:63:fb:d9:1a:5d:35:2b:5a:
b5:11:80:df:29:99:54:3e:34:ba:4e:c1:f5:2c:50:64:ea:c7:
18:aa:15:ef:66:43:d4:bd:b6:78:db:ce:34:e6:65:c8:84:49:
39:c5:6b:85:b6:d0:d5:1c:39:fd:c4:88:a8:70:32:c3:f8:a2:
9d:eb:09:fa:2c:ab:41:8e:9e:fd:8f:86:f9:9a:f0:d9:f6:d8:
7a:e6:77:27:eb:d5:61:e3:49:b0:b6:57:88:83:c4:19:f8:60:
28:e1:86:3a:17:6a:d0:e6:12:17:69:40:a3:58:03:bf:0b:13:
78:36:52:95:d7:15:d4:6c:94:b8:74:cd:a5:6f:e6:1b:91:28:
60:16:58:de:2d:77:aa:3b:d7:d3:0a:73:b6:35:a9:19:f1:27:
be:19:f0:59:a7:9a:28:68:ac:c0:9a:b2:21:e0:e1:b9:32:63:
2f:f0:56:1d:e8:43:ed:5d:ac:71:c3:ef:50:ee:13:2e:46:48:
ad:94:21:fd:2a:f1:db:68:10:22:f5:cc:b9:af:67:77:a5:92:
b5:d0:0f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:39 2025 by rpki-client